loaded ta_22-0-0-77_7c426e7f.bin, session slot 0, cmd_buf PA 0x8200000 len 0x8000 residue set: TA blocks=248 faults=0 === snapshot at 0x402938 : sp=0x41bf70 ctx=0x41d030 (machine FROZEN before teardown) === freeze OK: translate(sp)=0x4257f70 DACR=0x00005401 -> accessible domains [0, 5, 6, 7] --realwrites: stack paint capped at 0x41bfa5 (measured writable boundary) attacker-writable regions (user-RW AND DACR-permitted in the TA's own TTBR0): 0x00407000-0x00417000 dom=6 magic prefix 0x50 (paint from 0x40707f) 0x00418000-0x0041bfa5 dom=6 magic prefix 0x51 (paint from 0x41807f) 0x0041d000-0x00421000 dom=6 magic prefix 0x52 (paint from 0x41d07f) 0x00422000-0x00423000 dom=6 magic prefix 0x53 (paint from 0x42207f) 0x04000000-0x04001000 dom=5 magic prefix 0x54 (paint from 0x400007f) 0x04002000-0x04003000 dom=5 magic prefix 0x55 (paint from 0x400207f) painted 27 pages; pinned 3 uncontrollable words vector base 0x0, abort hooks armed HW-measured residue applied to 24/24 slots === POSITIVE CONTROLS (predicted outcomes) === 0x00402425 CPTR_READ insn=0x40483a base=r5 ptr<-CTRL 0x41bf9c (=0x418000+0x3f9c) expected: add sp,#0x28 ; pop.w{..pc} -> pc from *(sp+0x44), PAINTED => PC_CONTROL vec=0x10 lr_abt=0x404842 sp_usr=0x41bfb8 0x0040371d PREFETCH fetch=0x0 sp=0x41d054 expected: mov sp,r4 ; pop.w{..pc} -> pc from *(ctx+0x20), BELOW carve floor => not ctrl vec=0xc lr_abt=0x4 sp_usr=0x41d054 0x0040157b DATA insn=0x40157a ctrl_regs=[] expected: str r0,[r1] with r1=0 -> data abort at 0 vec=0x10 lr_abt=0x401582 sp_usr=0x41bf70 === SWEEP: 24384 candidates, cap 200 insns === .. 250/24384 0s 3079.9/s eta 8s hits=0 {'RAN': 232, 'DATA': 14, 'CPTR_WRITE': 3, 'SVC': 1, 'PREFETCH': 1} .. 500/24384 0s 3538.7/s eta 7s hits=0 {'RAN': 480, 'DATA': 14, 'CPTR_WRITE': 3, 'PREFETCH': 3, 'SVC': 1} .. 750/24384 0s 3329.7/s eta 7s hits=0 {'RAN': 687, 'DATA': 54, 'PREFETCH': 6, 'CPTR_WRITE': 3, 'SVC': 1} .. 1000/24384 0s 3401.5/s eta 7s hits=0 {'RAN': 687, 'DATA': 301, 'PREFETCH': 9, 'CPTR_WRITE': 3, 'SVC': 1} .. 1250/24384 0s 3326.3/s eta 7s hits=0 {'RAN': 903, 'DATA': 331, 'PREFETCH': 13, 'CPTR_WRITE': 3, 'SVC': 1} .. 1500/24384 0s 3443.3/s eta 7s hits=0 {'RAN': 1150, 'DATA': 331, 'PREFETCH': 16, 'CPTR_WRITE': 3, 'SVC': 1} .. 1750/24384 1s 3390.2/s eta 7s hits=0 {'RAN': 1398, 'DATA': 331, 'PREFETCH': 18, 'CPTR_WRITE': 3, 'SVC': 1} .. 2000/24384 1s 3436.0/s eta 7s hits=0 {'RAN': 1422, 'DATA': 354, 'SVC': 162, 'PREFETCH': 39, 'SP_IN_CTRL': 21} .. 2250/24384 1s 3585.3/s eta 6s hits=0 {'RAN': 1434, 'DATA': 421, 'SVC': 208, 'PREFETCH': 115, 'SP_IN_CTRL': 38} .. 2500/24384 1s 3694.5/s eta 6s hits=0 {'RAN': 1434, 'DATA': 473, 'SVC': 250, 'PREFETCH': 222, 'SP_IN_CTRL': 68} .. 2750/24384 1s 3779.9/s eta 6s hits=0 {'RAN': 1434, 'DATA': 576, 'PREFETCH': 312, 'SVC': 272, 'SP_IN_CTRL': 90} .. 3000/24384 1s 3830.1/s eta 6s hits=0 {'RAN': 1449, 'DATA': 645, 'PREFETCH': 446, 'SVC': 286, 'SP_IN_CTRL': 106} HIT V=0x004018a5 PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf5c (=0x418000+0x3f5c) | sp=0x41bf60 (in 0x418000) .. 3250/24384 1s 3864.5/s eta 5s hits=1 {'RAN': 1478, 'DATA': 677, 'PREFETCH': 609, 'SVC': 288, 'SP_IN_CTRL': 110} .. 3500/24384 1s 3904.5/s eta 5s hits=1 {'RAN': 1567, 'DATA': 727, 'PREFETCH': 686, 'SVC': 288, 'SP_IN_CTRL': 122} .. 3750/24384 1s 3921.1/s eta 5s hits=1 {'RAN': 1616, 'PREFETCH': 805, 'DATA': 786, 'SVC': 288, 'SP_IN_CTRL': 140} .. 4000/24384 1s 3954.2/s eta 5s hits=1 {'RAN': 1705, 'PREFETCH': 901, 'DATA': 835, 'SVC': 288, 'SP_IN_CTRL': 148} .. 4250/24384 1s 3991.6/s eta 5s hits=1 {'RAN': 1705, 'DATA': 983, 'PREFETCH': 948, 'SVC': 298, 'SP_IN_CTRL': 149} .. 4500/24384 1s 4007.8/s eta 5s hits=1 {'RAN': 1722, 'DATA': 1049, 'PREFETCH': 1043, 'SVC': 321, 'SP_IN_CTRL': 185} .. 4750/24384 1s 4051.5/s eta 5s hits=1 {'RAN': 1727, 'DATA': 1160, 'PREFETCH': 1066, 'SVC': 374, 'SP_IN_CTRL': 212} .. 5000/24384 1s 4073.7/s eta 5s hits=1 {'RAN': 1762, 'DATA': 1261, 'PREFETCH': 1128, 'SVC': 384, 'SP_IN_CTRL': 238} .. 5250/24384 1s 4099.6/s eta 5s hits=1 {'RAN': 1786, 'DATA': 1351, 'PREFETCH': 1206, 'SVC': 399, 'SP_IN_CTRL': 263} .. 5500/24384 1s 4116.4/s eta 5s hits=1 {'RAN': 1838, 'DATA': 1470, 'PREFETCH': 1247, 'SVC': 404, 'SP_IN_CTRL': 280} .. 5750/24384 1s 4126.6/s eta 5s hits=1 {'RAN': 1897, 'DATA': 1560, 'PREFETCH': 1261, 'SVC': 447, 'SP_IN_CTRL': 307} .. 6000/24384 1s 4138.6/s eta 4s hits=1 {'RAN': 1933, 'DATA': 1705, 'PREFETCH': 1277, 'SVC': 464, 'SP_IN_CTRL': 329} .. 6250/24384 2s 3876.6/s eta 5s hits=1 {'RAN': 1961, 'DATA': 1850, 'PREFETCH': 1312, 'SVC': 469, 'SP_IN_CTRL': 351} .. 6500/24384 2s 3901.7/s eta 5s hits=1 {'RAN': 2009, 'DATA': 1954, 'PREFETCH': 1342, 'SVC': 506, 'SP_IN_CTRL': 366} .. 6750/24384 2s 3931.1/s eta 4s hits=1 {'DATA': 2084, 'RAN': 2020, 'PREFETCH': 1376, 'SVC': 549, 'SP_IN_CTRL': 382} .. 7000/24384 2s 3953.2/s eta 4s hits=1 {'DATA': 2261, 'RAN': 2020, 'PREFETCH': 1400, 'SVC': 573, 'SP_IN_CTRL': 396} .. 7250/24384 2s 3970.6/s eta 4s hits=1 {'DATA': 2373, 'RAN': 2034, 'PREFETCH': 1417, 'SVC': 600, 'SP_IN_CTRL': 453} .. 7500/24384 2s 3997.3/s eta 4s hits=1 {'DATA': 2450, 'RAN': 2057, 'PREFETCH': 1449, 'SVC': 668, 'SP_IN_CTRL': 480} .. 7750/24384 2s 4005.0/s eta 4s hits=1 {'DATA': 2555, 'RAN': 2107, 'PREFETCH': 1467, 'SVC': 669, 'SP_IN_CTRL': 534} .. 8000/24384 2s 4018.0/s eta 4s hits=1 {'DATA': 2664, 'RAN': 2141, 'PREFETCH': 1483, 'SVC': 728, 'SP_IN_CTRL': 550} .. 8250/24384 2s 4037.0/s eta 4s hits=1 {'DATA': 2742, 'RAN': 2177, 'PREFETCH': 1521, 'SVC': 793, 'SP_IN_CTRL': 572} .. 8500/24384 2s 4054.2/s eta 4s hits=1 {'DATA': 2792, 'RAN': 2226, 'PREFETCH': 1554, 'SVC': 809, 'SP_IN_CTRL': 628} .. 8750/24384 2s 4070.9/s eta 4s hits=1 {'DATA': 2841, 'RAN': 2306, 'PREFETCH': 1633, 'SVC': 822, 'SP_IN_CTRL': 639} .. 9000/24384 2s 4079.7/s eta 4s hits=1 {'DATA': 2978, 'RAN': 2348, 'PREFETCH': 1657, 'SVC': 830, 'SP_IN_CTRL': 660} .. 9250/24384 2s 4091.3/s eta 4s hits=1 {'DATA': 3076, 'RAN': 2398, 'PREFETCH': 1699, 'SVC': 858, 'SP_IN_CTRL': 680} .. 9500/24384 2s 4101.4/s eta 4s hits=1 {'DATA': 3195, 'RAN': 2441, 'PREFETCH': 1726, 'SVC': 871, 'SP_IN_CTRL': 705} HIT V=0x00404d13 PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000) HIT V=0x00404d15 PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000) .. 9750/24384 2s 4109.8/s eta 4s hits=3 {'DATA': 3284, 'RAN': 2484, 'PREFETCH': 1761, 'SVC': 896, 'SP_IN_CTRL': 747} HIT V=0x00404d7b PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000) HIT V=0x00404d7d PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000) HIT V=0x00404d7f PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000) .. 10000/24384 2s 4108.6/s eta 4s hits=6 {'DATA': 3386, 'RAN': 2532, 'PREFETCH': 1791, 'SVC': 913, 'SP_IN_CTRL': 783} .. 10250/24384 2s 4120.0/s eta 3s hits=6 {'DATA': 3472, 'RAN': 2576, 'PREFETCH': 1839, 'SVC': 944, 'SP_IN_CTRL': 809} .. 10500/24384 3s 4135.5/s eta 3s hits=6 {'DATA': 3571, 'RAN': 2595, 'PREFETCH': 1862, 'SVC': 1012, 'SP_IN_CTRL': 833} .. 10750/24384 3s 4154.4/s eta 3s hits=6 {'DATA': 3652, 'RAN': 2603, 'PREFETCH': 1909, 'SVC': 1082, 'SP_IN_CTRL': 861} .. 11000/24384 3s 4178.0/s eta 3s hits=6 {'DATA': 3720, 'RAN': 2603, 'PREFETCH': 1923, 'SVC': 1204, 'SP_IN_CTRL': 896} .. 11250/24384 3s 4191.8/s eta 3s hits=6 {'DATA': 3801, 'RAN': 2626, 'PREFETCH': 1953, 'SVC': 1265, 'SP_IN_CTRL': 936} .. 11500/24384 3s 4196.1/s eta 3s hits=6 {'DATA': 3821, 'RAN': 2627, 'PREFETCH': 2038, 'SVC': 1399, 'SP_IN_CTRL': 936} .. 11750/24384 3s 4203.0/s eta 3s hits=6 {'DATA': 3834, 'RAN': 2627, 'PREFETCH': 2260, 'SVC': 1407, 'SP_IN_CTRL': 936} .. 12000/24384 3s 4221.8/s eta 3s hits=6 {'DATA': 3879, 'RAN': 2627, 'PREFETCH': 2331, 'SVC': 1526, 'SP_IN_CTRL': 943} .. 12250/24384 3s 4245.4/s eta 3s hits=6 {'DATA': 3879, 'RAN': 2627, 'PREFETCH': 2440, 'SVC': 1651, 'SP_IN_CTRL': 943} HIT V=0x00406271 PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000) .. 12500/24384 3s 4253.4/s eta 3s hits=7 {'DATA': 3942, 'RAN': 2631, 'PREFETCH': 2485, 'SVC': 1764, 'SP_IN_CTRL': 943} .. 12750/24384 3s 4239.0/s eta 3s hits=7 {'DATA': 4065, 'RAN': 2637, 'PREFETCH': 2512, 'SVC': 1807, 'SP_IN_CTRL': 963} .. 13000/24384 3s 4237.7/s eta 3s hits=7 {'DATA': 4300, 'RAN': 2637, 'PREFETCH': 2515, 'SVC': 1807, 'SP_IN_CTRL': 963} .. 13250/24384 3s 4227.9/s eta 3s hits=7 {'DATA': 4539, 'RAN': 2637, 'PREFETCH': 2515, 'SVC': 1807, 'SP_IN_CTRL': 963} .. 13500/24384 3s 4227.3/s eta 3s hits=7 {'DATA': 4768, 'RAN': 2637, 'PREFETCH': 2523, 'SVC': 1807, 'SP_IN_CTRL': 963} .. 13750/24384 3s 4228.3/s eta 3s hits=7 {'DATA': 4998, 'RAN': 2637, 'PREFETCH': 2529, 'SVC': 1807, 'SP_IN_CTRL': 963} .. 14000/24384 3s 4202.0/s eta 2s hits=7 {'DATA': 5126, 'RAN': 2730, 'PREFETCH': 2532, 'SVC': 1807, 'SP_IN_CTRL': 963} .. 14250/24384 3s 4191.9/s eta 2s hits=7 {'DATA': 5128, 'RAN': 2779, 'PREFETCH': 2731, 'SVC': 1807, 'SP_IN_CTRL': 963} .. 14500/24384 3s 4192.9/s eta 2s hits=7 {'DATA': 5128, 'RAN': 2991, 'PREFETCH': 2731, 'SVC': 1807, 'SP_IN_CTRL': 963} .. 14750/24384 4s 4210.1/s eta 2s hits=7 {'DATA': 5133, 'RAN': 3021, 'PREFETCH': 2739, 'SVC': 1815, 'UCERR': 1012} .. 15000/24384 4s 4211.6/s eta 2s hits=7 {'DATA': 5133, 'RAN': 3240, 'PREFETCH': 2739, 'SVC': 1815, 'UCERR': 1043} .. 15250/24384 4s 4232.0/s eta 2s hits=7 {'DATA': 5138, 'RAN': 3240, 'PREFETCH': 2758, 'SVC': 1824, 'UCERR': 1256} .. 15500/24384 4s 4254.5/s eta 2s hits=7 {'DATA': 5181, 'RAN': 3240, 'PREFETCH': 2790, 'SVC': 1939, 'UCERR': 1316} .. 15750/24384 4s 4281.5/s eta 2s hits=7 {'DATA': 5239, 'RAN': 3240, 'PREFETCH': 2828, 'SVC': 1951, 'UCERR': 1458} .. 16000/24384 4s 4302.8/s eta 2s hits=7 {'DATA': 5290, 'RAN': 3240, 'PREFETCH': 2892, 'SVC': 1969, 'UCERR': 1575} .. 16250/24384 4s 4327.3/s eta 2s hits=7 {'DATA': 5342, 'RAN': 3240, 'PREFETCH': 2949, 'SVC': 1977, 'UCERR': 1708} .. 16500/24384 4s 4354.8/s eta 2s hits=7 {'DATA': 5379, 'RAN': 3240, 'PREFETCH': 2968, 'SVC': 2004, 'UCERR': 1858} .. 16750/24384 4s 4382.6/s eta 2s hits=7 {'DATA': 5419, 'RAN': 3240, 'PREFETCH': 2995, 'SVC': 2038, 'UCERR': 2007} .. 17000/24384 4s 4411.8/s eta 2s hits=7 {'DATA': 5451, 'RAN': 3240, 'PREFETCH': 3014, 'UCERR': 2167, 'SVC': 2077} .. 17250/24384 4s 4436.4/s eta 2s hits=7 {'DATA': 5504, 'RAN': 3240, 'PREFETCH': 3056, 'UCERR': 2304, 'SVC': 2095} .. 17500/24384 4s 4464.0/s eta 2s hits=7 {'DATA': 5543, 'RAN': 3240, 'PREFETCH': 3080, 'UCERR': 2470, 'SVC': 2116} .. 17750/24384 4s 4493.2/s eta 1s hits=7 {'DATA': 5556, 'RAN': 3240, 'PREFETCH': 3131, 'UCERR': 2647, 'SVC': 2125} .. 18000/24384 4s 4519.9/s eta 1s hits=7 {'DATA': 5593, 'RAN': 3240, 'PREFETCH': 3159, 'UCERR': 2808, 'SVC': 2149} .. 18250/24384 4s 4543.5/s eta 1s hits=7 {'DATA': 5634, 'RAN': 3240, 'PREFETCH': 3212, 'UCERR': 2942, 'SVC': 2171} .. 18500/24384 4s 4564.2/s eta 1s hits=7 {'DATA': 5688, 'PREFETCH': 3254, 'RAN': 3240, 'UCERR': 3095, 'SVC': 2172} .. 18750/24384 4s 4592.4/s eta 1s hits=7 {'DATA': 5710, 'UCERR': 3283, 'PREFETCH': 3277, 'RAN': 3240, 'SVC': 2189} .. 19000/24384 4s 4615.6/s eta 1s hits=7 {'DATA': 5756, 'UCERR': 3434, 'PREFETCH': 3314, 'RAN': 3240, 'SVC': 2205} .. 19250/24384 4s 4637.8/s eta 1s hits=7 {'DATA': 5802, 'UCERR': 3576, 'PREFETCH': 3357, 'RAN': 3240, 'SVC': 2224} .. 19500/24384 4s 4658.8/s eta 1s hits=7 {'DATA': 5854, 'UCERR': 3715, 'PREFETCH': 3399, 'RAN': 3240, 'SVC': 2241} .. 19750/24384 4s 4677.9/s eta 1s hits=7 {'DATA': 5880, 'UCERR': 3854, 'PREFETCH': 3460, 'RAN': 3240, 'SVC': 2264} .. 20000/24384 4s 4699.4/s eta 1s hits=7 {'DATA': 5915, 'UCERR': 3980, 'PREFETCH': 3523, 'RAN': 3240, 'SVC': 2289} .. 20250/24384 4s 4718.7/s eta 1s hits=7 {'DATA': 5946, 'UCERR': 4093, 'PREFETCH': 3618, 'RAN': 3240, 'SVC': 2300} .. 20500/24384 4s 4728.2/s eta 1s hits=7 {'DATA': 5965, 'UCERR': 4221, 'PREFETCH': 3669, 'RAN': 3254, 'SVC': 2332} .. 20750/24384 4s 4746.8/s eta 1s hits=7 {'DATA': 6020, 'UCERR': 4360, 'PREFETCH': 3696, 'RAN': 3254, 'SVC': 2361} .. 21000/24384 4s 4759.9/s eta 1s hits=7 {'DATA': 6106, 'UCERR': 4447, 'PREFETCH': 3728, 'RAN': 3254, 'SVC': 2406} .. 21250/24384 4s 4758.4/s eta 1s hits=7 {'DATA': 6171, 'UCERR': 4524, 'PREFETCH': 3823, 'RAN': 3254, 'SVC': 2419} .. 21500/24384 5s 4753.7/s eta 1s hits=7 {'DATA': 6318, 'UCERR': 4526, 'PREFETCH': 3915, 'RAN': 3256, 'SVC': 2424} .. 21750/24384 5s 4765.4/s eta 1s hits=7 {'DATA': 6371, 'UCERR': 4568, 'PREFETCH': 3974, 'RAN': 3278, 'SVC': 2474} .. 22000/24384 5s 4772.9/s eta 0s hits=7 {'DATA': 6535, 'UCERR': 4597, 'PREFETCH': 3989, 'RAN': 3306, 'SVC': 2479} .. 22250/24384 5s 4779.3/s eta 0s hits=7 {'DATA': 6624, 'UCERR': 4628, 'PREFETCH': 4059, 'RAN': 3309, 'SVC': 2485} .. 22500/24384 5s 4764.4/s eta 0s hits=7 {'DATA': 6643, 'UCERR': 4631, 'PREFETCH': 4059, 'RAN': 3535, 'SVC': 2487} .. 22750/24384 5s 4747.3/s eta 0s hits=7 {'DATA': 6643, 'UCERR': 4631, 'PREFETCH': 4059, 'RAN': 3785, 'SVC': 2487} .. 23000/24384 5s 4733.5/s eta 0s hits=7 {'DATA': 6643, 'UCERR': 4631, 'PREFETCH': 4059, 'RAN': 4035, 'SVC': 2487} .. 23250/24384 5s 4573.9/s eta 0s hits=7 {'DATA': 6643, 'UCERR': 4631, 'RAN': 4195, 'PREFETCH': 4149, 'SVC': 2487} .. 23500/24384 5s 4576.5/s eta 0s hits=7 {'DATA': 6658, 'UCERR': 4646, 'PREFETCH': 4260, 'RAN': 4196, 'SVC': 2524} .. 23750/24384 5s 4594.0/s eta 0s hits=7 {'DATA': 6709, 'UCERR': 4757, 'PREFETCH': 4304, 'RAN': 4196, 'SVC': 2566} .. 24000/24384 5s 4593.2/s eta 0s hits=7 {'DATA': 6723, 'UCERR': 4822, 'RAN': 4356, 'PREFETCH': 4312, 'SVC': 2567} .. 24250/24384 5s 4586.0/s eta 0s hits=7 {'DATA': 6723, 'UCERR': 4822, 'RAN': 4541, 'PREFETCH': 4377, 'SVC': 2567} === outcome histogram === DATA 6723 (27.6%) UCERR 4822 (19.8%) RAN 4541 (18.6%) PREFETCH 4510 (18.5%) SVC 2567 (10.5%) SP_IN_CTRL 1152 (4.7%) CPTR_READ 54 (0.2%) CPTR_WRITE 8 (0.0%) PC_CONTROL+SP_IN_CTRL 7 (0.0%) === CONTROL hits: 7 === V=0x004018a5 PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf5c (=0x418000+0x3f5c) | sp=0x41bf60 (in 0x418000) V=0x00404d13 PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000) V=0x00404d15 PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000) V=0x00404d7b PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000) V=0x00404d7d PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000) V=0x00404d7f PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000) V=0x00406271 PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000) wrote /tmp/sweep_cptr2.json